CVE-2024-43052

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing API calls to NPU with invalid input.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8017; APQ8037; FastConnect 6800; FastConnect 6900; FastConnect 7800; Home Hub 100 Platform; MSM8108; MSM8209; MSM8608; MSM8909W; PM8937; QCA6174A; QCA6391; QCA6421; QCA6426; QCA6431; QCA6436; QCA9379; QCM2150; QCM8550
qualcommapq8017_firmware<= *
qualcommapq8037_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommhome_hub_100_platform_firmware<= *
qualcommmsm8108_firmware<= *
qualcommmsm8209_firmware<= *
qualcommmsm8608_firmware<= *
qualcommmsm8909w_firmware<= *
qualcommpm8937_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6421_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6431_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca9379_firmware<= *
qualcommqcm2150_firmware<= *
qualcommqcm8550_firmware<= *
qualcommqcn9274_firmware<= *
qualcommqcs7230_firmware<= *
qualcommqcs8250_firmware<= *
qualcommqcs8550_firmware<= *
qualcommqet4101_firmware<= *
qualcommqsm8250_firmware<= *
qualcommqsw8573_firmware<= *
qualcommqualcomm_205_mobile_platform_firmware<= *
qualcommqualcomm_215_mobile_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc5_platform_firmware<= *
qualcommsc8380xp_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsdm429w_firmware<= *
qualcommsdx55_firmware<= *
qualcommsg8275p_firmware<= *
qualcommsm8550p_firmware<= *
qualcommsm8635_firmware<= *
qualcommsm8750_firmware<= *
qualcommsm8750p_firmware<= *
qualcommsmart_audio_200_platform_firmware<= *
qualcommsnapdragon_208_processor_firmware<= *
qualcommsnapdragon_210_processor_firmware<= *
qualcommsnapdragon_212_mobile_platform_firmware<= *
qualcommsnapdragon_425_mobile_platform_firmware<= *
qualcommsnapdragon_427_mobile_platform_firmware<= *
qualcommsnapdragon_429_mobile_platform_firmware<= *
qualcommsnapdragon_430_mobile_platform_firmware<= *
qualcommsnapdragon_435_mobile_platform_firmware<= *
qualcommsnapdragon_439_mobile_platform_firmware<= *

References

Timeline

Published
Dec 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-430537.8Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.CVE-2024-430557.8Memory corruption while processing camera use case IOCTL call.CVE-2024-430566.5Transient DOS during hypervisor virtual I/O operation in a virtual machine.CVE-2024-430577.8Memory corruption while processing command in Glink linux.CVE-2024-430587.8Memory corruption while processing IOCTL calls.CVE-2024-430597.8Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.CVE-2024-43068.8Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload maCVE-2024-430607.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.CVE-2024-430617.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HCVE-2024-430627.8Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.CVE-2024-430635.5information disclosure while invoking the mailbox read API.CVE-2024-430644.7Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
CVE-2024-43052: High severity, CVSS 7.8 | Vulnix